CVE-2007-0417

BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.

Link	Resource
http://dev2dev.bea.com/pub/advisory/211	Patch Vendor Advisory
http://securitytracker.com/id?1017525
http://secunia.com/advisories/23750
http://www.securityfocus.com/bid/22082
http://osvdb.org/38511
http://www.vupen.com/english/advisories/2007/0213

Configuration 1

cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:9.0:*:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:8.1:sp5:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:9.1:*:*:*:*:*:*:* cpe:2.3:a:bea:weblogic_server:*:sp7:*:*:*:*:*:*

---

Published : 2007-01-23 12:28

Updated : 2011-03-08 02:49

---

NVD link : CVE-2007-0417

Mitre link : CVE-2007-0417

No products.

NVD-CWE-Other